huawei-cloud-iam-diagnose
Installation
SKILL.md
Huawei Cloud IAM Reference Permission Analysis (IAM 参考性权限分析)
Overview
This skill performs reference permission analysis for Huawei Cloud IAM. It answers questions
like "does user <u> have permission to do <action> on resource <r>?" by expanding the user's
permission chains and statically evaluating policy documents.
Honest Capability Boundary (read first)
| Capability | Status | Notes |
|---|---|---|
| User-level permission simulation (AWS IAM Policy Simulator equivalent) | ❌ Not available | Neither the IAM CLI nor the SDK provide a SimulatePrincipal API |
| Group-level check | ✅ | keystone_check_project_permission_for_group, keystone_check_domain_permission_for_group, keystone_checkrole_for_group |
| Agency-level check | ✅ | check_project_permission_for_agency, check_domain_permission_for_agency, check_all_projects_permission_for_agency |
| Check whether a user is in a group | ✅ | keystone_check_user_in_group |
| Policy document fetch | ✅ | get_policy_version_v5, keystone_show_permission, show_custom_policy |
| Authorization schema metadata | ✅ | get_authorization_schema_v5 |